How To Complete a Zero-Touch Assessment

Table of Contents

• Summary
• Steps
• Trust Center Exchange Import - Approvals
• Additional Resources

Summary

If you are unfamiliar with the concept, Zero-Touch Assessments occur when a vendor publishes a security Trust Center publicly (either on their website or a third-party marketplace or directory), enabling the customer to conduct an assessment without having to chase down information from internal stakeholders, saving both parties time!

Have you ever found information in the Trust Center Exchange regarding a vendor you need to assess? If you have, you may have noticed you could assess their security posture based on the information you found, without having to request a questionnaire.

Daily, vendors are proactively sharing their security information to our Trust Center Exchange and the number of Trust Centers available in the Trust Center Exchange expands each day.

📋 Steps

1. Login to Whistic and select Trust Center Exchange from the Trust Center dropdown.
2. Located at the top left of the Trust Center Exchange is a search bar where you can search for vendors by:
   1. Vendor Name
   2. Vendor URL
   3. Full Trust Center

3. Search for "Whistic" or another vendor and click the Trust Center tile that generates results

4. In the right-hand pane, review the Trust Center contents

5. Click Import to My Catalog at the top of the pane

6. Navigate to your Vendor Catalog and locate "Whistic" or the vendor you just imported
7. Click on the Trust Center to view all Trust Center contents, or click on a specific questionnaire to begin your (Zero Touch Assessment)

🔒 Trust Center Exchange Import - Approvals

For items that display a lock icon, this is due to the Trust Center owner restricting access and requiring approval before their questionnaire information is provided. Once approval has been granted, you will receive an email notifying you and will be able to access the information from the Assessment Activity.

Below is an example of a locked item, from the Trust Center Exchange:

Note: Questionnaires that require approval before you can access them will be designated as pending on the vendor details page, under 'Assessments' section. See image below:

Pro Tip: To quickly sort through the Trust Center Exchange and only show vendors already in your Vendor Catalog, move this slider (Below).

📚 Additional Resources

Whistic Ready Trust Centers

Want to ensure the Trust Center information is up to date? The Whistic Ready badge will show up on Trust Centers published to the Trust Center Exchange that meet the following criteria. The badge will display as a small mark on the company tile in the Trust Center Exchange and as a full Whistic Ready badge (below) on the Trust Center Exchange side-bar view:

To be considered Whistic Ready, a Trust Center would need to include a recent version of at least one of the following:

• Industry-standard questionnaire
• SOC 1 or SOC 2 documentation
• ISO 27001 or 27002 documentation

Want to learn more about Whistic Ready? Click HERE